gvfs vulnerabilities
CVEs whose affected-version data names the gvfs package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-88924High· 7.0PoCA flaw was found in the admin backend of gvfs
A flaw was found in the admin backend of gvfs. The privileged gvfsd-admin daemon changes the ownership of newly created private D-Bus sockets by calling the link-following chown() function on a pathname inside a user-controlled directory…
▾ MidnightGNOME · gvfsEPSS 0.22%via NVD
CVE-2026-84268High· 8.8A flaw was found in the SFTP backend in gvfs
A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause read_reply() to process a length that exceeds the size requested by the client. The function does not verify the se…
▾ TwilightGNOME · gvfsEPSS 0.62%via NVD